Authentication is a signed, expiring nonce bound to this domain, your wallet and the chain. No password, no email as the source of authority.